administrator account
Account used to log on to Windows 2000 by users to create service accounts, install Microsoft Operations Manager 2000 components, and have access to the Configuration snap-in. Administrators are members of the Administrators group and have full control over the domain or computer.
Service that runs on every computer you want to monitor. An agent captures information from the computer on which it is running. An agent applies predefined processing rules to the captured data and performs actions as defined by the processing rules.
Agent Manager
Part of the Consolidator component that tracks computer groups and processing rules, and installs and uninstalls agents as necessary.
An indication of a significant event. Alerts are defined by processing rules.
alert forwarding
Feature that sends alerts from one configuration group to another. Allows the creation of an efficient hierarchical alert management structure for large enterprise networks.
alert rule
Processing rule that specifies one response for a number of previously defined alerts.
alert severity
Property of an alert indicating its seriousness. Examples include Service Unavailable, Security Breach, Critical Error, Error, Warning, Information, and Success.
alert view
Window that displays specified alerts in the configuration group.
Computer characteristic, typically defined by a Registry key or value.
attribute view
Window that displays specified computer attributes in the configuration group.


Boolean regular expressions
Search criteria for text pattern matching that allow you to combine regular expressions using the Boolean operators and, or, and not.


company knowledge base
Information you add to alerts or processing rules about resolving the indicated condition.
computer group
Collection of computers with some attribute in common. Computer groups are defined by computer grouping rules for similar event management.
computer group view
Window that displays specified computer groups in the configuration group.
computer grouping rule
Rule that combines computers with common attributes into a group to be similarly managed and monitored.
computer view
Window that displays specified computers in the configuration group.
configuration group
Group of computers containing the following Microsoft Operations Manager 2000 components: one database, one or more Data Access Servers, one or more Consolidators, and one or more agents.
computer rule formula
Regular expression or wildcards used to create a computer grouping rule. For example: Windows_Version = 2000 AND (MSMQ_Installed).
Individual part of the product: agent, Consolidator, Data Access Server (DAS), or database.
conditional filter
Filter that allows Microsoft Operations Manager 2000 to evaluate further processing rules, but does not insert events into the database unless another processing rule match occurs.
Collects and sends collected information from agents through the Data Access Server (DAS) to the database. Acts as an agent on its local computer. The Consolidator and Agent Manager install together on a central computer.
consolidation rule
Processing rule for grouping multiple events from a computer into a single summary event.


Data Access Server (DAS)
Component that receives events from the Consolidators and inserts them into the database. Requests for data from the database and requests to insert data into the database typically go through the DAS.
Central product component that stores information including events, alerts, rules, and scripts.
database filter
Filter that allows Microsoft Operations Manager 2000 to evaluate further processing rules, but does not insert matching events into the database.
Flow of events, alerts, and performance information from the agents to the Consolidator, from the Consolidator to the DAS, and from the DAS to the database.
duplicate alert suppression
Feature that combines multiple identical alerts within a specified period of time into one alert.


Any significant occurrence in the system or an application that requires a user to be notified or an entry to be added to a log.
Microsoft Operations Manager 2000 monitors events logged in Windows 2000 event logs and other application logs, among others.
event consolidation
Combines multiple events into one event. The single event identifies the number of consolidated events and when the first and last consolidated events occurred.
event rule
Processing rule for generating an alert when specific events occur.
event view
Window that displays specified events in the configuration group.


See filtering rule.
filtering rule
Processing rule for excluding an event, alert, or performance data from some or all processing by Microsoft Operations Manager 2000. Types of filters include pre-filters, conditional filters, and database filters.
See alert forwarding.


No Glossary entries.


Periodic pulse from the agent that contains information related to its viability. The heartbeat also informs the Consolidator of the current rules evaluated by the agent, requesting updates if necessary.


No Glossary entries.


No Glossary entries.


knowledge base
A collection of rule comments that embodies knowledge about the meaning and importance of events. The Microsoft Knowledge Base contains predefined information from Microsoft. The company knowledge base contains information entered by the Microsoft Operations Manager 2000 user.


No Glossary entries.


Managed Computers list
List of computers matching the Managed Computer rule for an Agent Manager.
Managed Computer rule
Rule that specifies the computers on which an Agent Manager is responsible for installing and uninstalling agents.
Management Pack modules
Predefined solutions from Microsoft. Contain computer groups and processing rules, with filters, performance counters, and alerts defined for specific customer applications such as Microsoft Exchange.
master configuration group
Configuration group to which zone configuration groups forward alerts.
measuring rule
Processing rule for collecting a numeric value from Windows NT performance counters. See performance measure.
missing event
An event that was supposed to occur within a specified time interval, but did not occur.
missing event rule
Processing rule for generating an alert when particular events do not occur during a specified time. See missing event.
MOM Administrator Console
Interface based on Microsoft Management Console (MMC) technology, used for monitoring and event management. Can include the Microsoft Operations Manager 2000 Monitor, Rules, and Configuration snap-ins.


nested groups
Rule groups within rule groups.
notification group
List of operators and scheduled availability for receiving page or e-mail responses.


OnePointOp ConfgAdms
Windows 2000 group providing member accounts with the permissions necessary to modify the computers on which Microsoft Operations Manager 2000 installs agents.
OnePointOp Operators
Windows 2000 group providing member accounts with the permissions necessary to specify what information is collected and what the product does with it.
OnePointOp System
Windows 2000 group providing member accounts with the permission necessary for Data Access Server (DAS) and Consolidator service accounts.
OnePointOp Users
Windows 2000 group providing member accounts with the permissions necessary to monitor collected information. User accounts cannot modify product functionality.
OnePointOp MOM Reporting
Windows 2000 group providing member accounts with the permissions necessary to run reports using MOM Reporting.
Person scheduled to receive e-mail or page responses from Microsoft Operations Manager 2000.


performance data
Sampled numeric data collected from Windows NT performance counters.
performance data view
Window that displays specified performance information.
performance measure
Sampled numeric data collected for capacity planning.
performance threshold
Sampled numeric data compared to a threshold value. Microsoft Operations Manager 2000 generates an alert if the threshold is crossed in either direction.
Filter that excludes an event from further processing by Microsoft Operations Manager 2000. The event is not inserted in the database.
private view
A view that is accessible only by the user who created it, and is saved in the My Views folder.
processing rule
Rule that defines how Microsoft Operations Manager 2000 collects, processes, and responds to information. Types of processing rules include event, filtering, missing event, consolidation, alert, performance measuring, and performance threshold.
processing rule group
Set of processing rules grouped together with a single name. Grouping processing rules together allows you to associate more than one processing rule with a computer group.
processing rule match
Occurs when Microsoft Operations Manager 2000 receives information that matches a processing rule. When a processing rule match occurs, the product performs the actions and response defined in that rule.
Source of information collected by Microsoft Operations Manager 2000. Providers include system event logs and performance counters, among others.
public view
A view that is accessible by anyone, and is saved in the Public Views folder.


No Glossary entries.


regular expressions
Search criteria for text pattern matching that provide more flexibility than simple wildcard characters.
MOM Reporting
Interface to the database that allows you to generate reports, including specific security auditing and general system monitoring reports, and graphs useful for capacity planning or performance analysis.
resolution history
Microsoft Operations Manager 2000 automatically tracks changes to alert fields. You can also enter your own information about an alert.
resolution state
Status in the cycle of resolving alerts. Default resolution states include New, Acknowledged, and Resolved, among others.
Action that Microsoft Operations Manager 2000 initiates when a processing rule match occurs. Notifications, command or batch files, scripts, and SNMP traps are examples of possible responses. Responses that occur on the Consolidator computer are central responses. Responses that occur on the agent computer are local responses.
Method of grouping computers or identifying data to collect. You can define two types of rules:
  • Computer Grouping: Rule that creates a collection of computers for similar event management.
  • Processing: Rule that defines the events, alerts, and performance data to collect, what to do with the information once it is collected, and how to respond to the indicated condition.


Simple program that can be added to a processing rule as a response, or used as an extension to the event criteria definition.
service level agreement time
The amount of time an alert can remain in an alert resolution state before it becomes a service level exception.
service level exception
An alert that has remained longer than specified in a resolution state. For example, the default service expectation time for an alert to remain in the New resolution state is 10 minutes. If an alert's resolution state is New for longer than 10 minutes, it is considered a service level exception.


threshold rule
Processing rule for creating an alert when a Windows NT performance counter value crosses a defined threshold. See performance threshold.


uninstall delay
The amount of time Microsoft Operations Manager 2000 waits before removing an unnecessary agent from a managed computer. The default uninstall delay is 48 hours.


A window in the Microsoft Operations Manager 2000 Monitor snap-in that displays specified data from the database.


Web Console
Interface that allows you to access database information from any Windows platform that can run Microsoft Internet Explorer.
Web Console server
Component installed on a Microsoft Internet Information Services computer that hosts the Web Console.
Web farm
Potentially hundreds of Windows 2000 servers linked in a network environment to support a company's web site. Many thousands of users can access a company's web farm servers in a day. Microsoft Operations Manager 2000 helps network administrators ensure smooth web farm operation.


No Glossary entries.


No Glossary entries.


zone configuration group
Configuration group that forwards alerts to the master configuration group.